chore(flux): update helm release cilium 1.16.2 → 1.16.3 by renovate (#27972)
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [cilium](https://cilium.io/)
([source](https://redirect.github.com/cilium/cilium)) | patch | `1.16.2`
-> `1.16.3` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.
---
### Release Notes
<details>
<summary>cilium/cilium (cilium)</summary>
###
[`v1.16.3`](https://redirect.github.com/cilium/cilium/releases/tag/v1.16.3):
1.16.3
[Compare
Source](https://redirect.github.com/cilium/cilium/compare/1.16.2...1.16.3)
## Summary of Changes
**Bugfixes:**
- bgpv2: fix reconciliation of services with shared VIPs (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35166](https://redirect.github.com/cilium/cilium/issues/35166),
[@​rastislavs](https://redirect.github.com/rastislavs))
- bgpv2: Fix service reconciliation logic to update service
advertisement metadata only after successful reconciliation (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34976](https://redirect.github.com/cilium/cilium/issues/34976),
[@​rastislavs](https://redirect.github.com/rastislavs))
- bpf: nat: recreate a NAT entry if the packet hits the stale entry
(Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34913](https://redirect.github.com/cilium/cilium/issues/34913),
[@​ysksuzuki](https://redirect.github.com/ysksuzuki))
- bugtool: fix cilium-health command (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35068](https://redirect.github.com/cilium/cilium/issues/35068),
[@​ayuspin](https://redirect.github.com/ayuspin))
- Fix a low-probability issue where the DNS proxy could occasionally
drop DNS queries due to "duplicate request id" errors. (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34941](https://redirect.github.com/cilium/cilium/issues/34941),
[@​bimmlerd](https://redirect.github.com/bimmlerd))
- Fix issue where bpf packet buffer mark would in some cases set
incorrect mark value resulting in incorrectly SNATed traffic. (Backport
PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34789](https://redirect.github.com/cilium/cilium/issues/34789),
[@​tommyp1ckles](https://redirect.github.com/tommyp1ckles))
- Fix parameter check to forbid IPAM ENI with TUNNEL routing, and
prevent agent segfault when also IPSec is enabled. (Backport PR
[#​34918](https://redirect.github.com/cilium/cilium/issues/34918),
Upstream PR
[#​34651](https://redirect.github.com/cilium/cilium/issues/34651),
[@​smagnani96](https://redirect.github.com/smagnani96))
- Fixed bug in LB-IPAM where restarting the operator would unshare
previously shared IPs between services (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34783](https://redirect.github.com/cilium/cilium/issues/34783),
[@​dylandreimerink](https://redirect.github.com/dylandreimerink))
- Fixed bug in tracking policy changes that could have resulted in
revert not woking in failure cases as expected. (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35109](https://redirect.github.com/cilium/cilium/issues/35109),
[@​jrajahalme](https://redirect.github.com/jrajahalme))
- Fixed bug where service id allocator would loop infinity when out of
service ids (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35033](https://redirect.github.com/cilium/cilium/issues/35033),
[@​WeeNews](https://redirect.github.com/WeeNews))
- Fixes startup fatal error when updating CiliumNode resource. (Backport
PR
[#​34918](https://redirect.github.com/cilium/cilium/issues/34918),
Upstream PR
[#​34862](https://redirect.github.com/cilium/cilium/issues/34862),
[@​harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- gateway-api: Align GRPCRoute matchers with GEP specification (Backport
PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​34808](https://redirect.github.com/cilium/cilium/issues/34808),
[@​cfsnyder](https://redirect.github.com/cfsnyder))
- helm template function no longer errors when using k8sServiceHost:
auto (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35186](https://redirect.github.com/cilium/cilium/issues/35186),
[@​kreeuwijk](https://redirect.github.com/kreeuwijk))
- hubble: add printer for lost events (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35208](https://redirect.github.com/cilium/cilium/issues/35208),
[@​aanm](https://redirect.github.com/aanm))
- ipcache: Yet another refcounting fix with mix of APIs (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34715](https://redirect.github.com/cilium/cilium/issues/34715),
[@​gandro](https://redirect.github.com/gandro))
- netkit: Allow ARP packets through when using host firewall. (Backport
PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35070](https://redirect.github.com/cilium/cilium/issues/35070),
[@​jrife](https://redirect.github.com/jrife))
- wireguard: Fix issue where updates to a WireGuard device's
configuration caused connectivity blips. (Backport PR
[#​35115](https://redirect.github.com/cilium/cilium/issues/35115),
Upstream PR
[#​34612](https://redirect.github.com/cilium/cilium/issues/34612),
[@​jrife](https://redirect.github.com/jrife))
**CI Changes:**
- .github/lint-build-commits: fix workflow for push events (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35264](https://redirect.github.com/cilium/cilium/issues/35264),
[@​aanm](https://redirect.github.com/aanm))
- .github: create cache directories on cache miss (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​35088](https://redirect.github.com/cilium/cilium/issues/35088),
[@​aanm](https://redirect.github.com/aanm))
- .github: do not push floating tag from PRs (Backport PR
[#​35230](https://redirect.github.com/cilium/cilium/issues/35230),
Upstream PR
[#​35227](https://redirect.github.com/cilium/cilium/issues/35227),
[@​aanm](https://redirect.github.com/aanm))
- .github: install golang action after checkout (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34843](https://redirect.github.com/cilium/cilium/issues/34843),
[@​aanm](https://redirect.github.com/aanm))
- .github: re-enable configurations in e2e-upgrade (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34800](https://redirect.github.com/cilium/cilium/issues/34800),
[@​aanm](https://redirect.github.com/aanm))
- .github: specify cache-dependency-path in lint-workflows (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34845](https://redirect.github.com/cilium/cilium/issues/34845),
[@​aanm](https://redirect.github.com/aanm))
- \[1.16] test: Skip envoy internal_address_config warning log
([#​35053](https://redirect.github.com/cilium/cilium/issues/35053),
[@​pippolo84](https://redirect.github.com/pippolo84))
- \[v1.16] gha: fix incorrect go version in lint-build-commits workflow
([#​35312](https://redirect.github.com/cilium/cilium/issues/35312),
[@​giorio94](https://redirect.github.com/giorio94))
- ci: conformance-\[gateway-api|ginkgo|ingress] wait for images before
matrix generation (Backport PR
[#​34918](https://redirect.github.com/cilium/cilium/issues/34918),
Upstream PR
[#​34820](https://redirect.github.com/cilium/cilium/issues/34820),
[@​aanm](https://redirect.github.com/aanm))
- fix: repository nil value handled on workflow_dispatch context for
renovate updates (Backport PR
[#​34918](https://redirect.github.com/cilium/cilium/issues/34918),
Upstream PR
[#​34902](https://redirect.github.com/cilium/cilium/issues/34902),
[@​Artyop](https://redirect.github.com/Artyop))
- servicemesh, ci: run internal to NodePort test (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35177](https://redirect.github.com/cilium/cilium/issues/35177),
[@​marseel](https://redirect.github.com/marseel))
**Misc Changes:**
- .github: add cache to cilium-cli and hubble-cli build workflows
(Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34847](https://redirect.github.com/cilium/cilium/issues/34847),
[@​aanm](https://redirect.github.com/aanm))
- .github: clean up disk for lint-build workflow (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​35141](https://redirect.github.com/cilium/cilium/issues/35141),
[@​aanm](https://redirect.github.com/aanm))
- .github: fix build image process to commit changes (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35262](https://redirect.github.com/cilium/cilium/issues/35262),
[@​aanm](https://redirect.github.com/aanm))
- .github: fix lvh-kind warnings (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34811](https://redirect.github.com/cilium/cilium/issues/34811),
[@​aanm](https://redirect.github.com/aanm))
- .github: fix runtime image digests (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35107](https://redirect.github.com/cilium/cilium/issues/35107),
[@​aanm](https://redirect.github.com/aanm))
- .github: push floating tag for push events for stable branches
([#​35235](https://redirect.github.com/cilium/cilium/issues/35235),
[@​aanm](https://redirect.github.com/aanm))
- \[v1.16] .github: do not update github runners for bpf workflows
([#​35106](https://redirect.github.com/cilium/cilium/issues/35106),
[@​aanm](https://redirect.github.com/aanm))
- \[v1.16] manually update dependency cilium/cilium-cli to v0.16.19
(v1.16)
([#​35310](https://redirect.github.com/cilium/cilium/issues/35310),
[@​julianwiedmann](https://redirect.github.com/julianwiedmann))
- bgpv2/docs: add ebgp multihop documentation (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34951](https://redirect.github.com/cilium/cilium/issues/34951),
[@​harsimran-pabla](https://redirect.github.com/harsimran-pabla))
- bgpv2: cleanup service reconciliation logic (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34959](https://redirect.github.com/cilium/cilium/issues/34959),
[@​rastislavs](https://redirect.github.com/rastislavs))
- Change GH runners to GH's default (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​33451](https://redirect.github.com/cilium/cilium/issues/33451),
[@​aanm](https://redirect.github.com/aanm))
- chore(deps): update all github action dependencies (v1.16)
([#​35025](https://redirect.github.com/cilium/cilium/issues/35025),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#​35082](https://redirect.github.com/cilium/cilium/issues/35082),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all github action dependencies (v1.16)
([#​35250](https://redirect.github.com/cilium/cilium/issues/35250),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#​35005](https://redirect.github.com/cilium/cilium/issues/35005),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update all-dependencies (v1.16)
([#​35283](https://redirect.github.com/cilium/cilium/issues/35283),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update dependency cilium/cilium-cli to v0.16.18 (v1.16)
([#​34999](https://redirect.github.com/cilium/cilium/issues/34999),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update docker.io/library/golang:1.22.7 docker digest to
[`ddad330`](https://redirect.github.com/cilium/cilium/commit/ddad330)
(v1.16)
([#​35101](https://redirect.github.com/cilium/cilium/issues/35101),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update go to v1.22.8 (v1.16)
([#​35201](https://redirect.github.com/cilium/cilium/issues/35201),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.29.9-1727741018-e3a7412f65722ebbe34254b3582b89d315765d0d (v1.16)
([#​35137](https://redirect.github.com/cilium/cilium/issues/35137),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- chore(deps): update quay.io/cilium/cilium-envoy docker tag to
v1.29.9-1727997080-b094128ed01b784b63ada19b54f8c7fdc3042e6e (v1.16)
([#​35218](https://redirect.github.com/cilium/cilium/issues/35218),
[@​cilium-renovate](https://redirect.github.com/cilium-renovate)\[bot])
- cilium-cli: Show config.cilium.io annotations on configmap (Backport
PR
[#​35155](https://redirect.github.com/cilium/cilium/issues/35155),
Upstream PR
[#​35020](https://redirect.github.com/cilium/cilium/issues/35020),
[@​joamaki](https://redirect.github.com/joamaki))
- docs: Add known issue for netkit endpoint route issues (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35126](https://redirect.github.com/cilium/cilium/issues/35126),
[@​jrife](https://redirect.github.com/jrife))
- docs: fix EKS Kubernetes compatibility link (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34922](https://redirect.github.com/cilium/cilium/issues/34922),
[@​fjvela](https://redirect.github.com/fjvela))
- docs: Improve warning on insecure global IPsec keys (Backport PR
[#​34918](https://redirect.github.com/cilium/cilium/issues/34918),
Upstream PR
[#​34846](https://redirect.github.com/cilium/cilium/issues/34846),
[@​pchaigno](https://redirect.github.com/pchaigno))
- docs: move sig-policy to second Tuesday of the month (Backport PR
[#​35115](https://redirect.github.com/cilium/cilium/issues/35115),
Upstream PR
[#​35040](https://redirect.github.com/cilium/cilium/issues/35040),
[@​squeed](https://redirect.github.com/squeed))
- fix: Assign PodStore from Pod resource until cell migration is
completed (Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​34090](https://redirect.github.com/cilium/cilium/issues/34090),
[@​dlapcevic](https://redirect.github.com/dlapcevic))
- helm: add client auth to hubble server certificate (Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34934](https://redirect.github.com/cilium/cilium/issues/34934),
[@​kaworu](https://redirect.github.com/kaworu))
- helm: set key usages for hubble certificates with cert-manager
(Backport PR
[#​35036](https://redirect.github.com/cilium/cilium/issues/35036),
Upstream PR
[#​34946](https://redirect.github.com/cilium/cilium/issues/34946),
[@​kaworu](https://redirect.github.com/kaworu))
- Improve speed on lint commits GH workflow (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34848](https://redirect.github.com/cilium/cilium/issues/34848),
[@​aanm](https://redirect.github.com/aanm))
- install/kubernetes: fix Operator's clusterrole for pods deletion
(Backport PR
[#​35274](https://redirect.github.com/cilium/cilium/issues/35274),
Upstream PR
[#​35193](https://redirect.github.com/cilium/cilium/issues/35193),
[@​aanm](https://redirect.github.com/aanm))
- Re-write GitHub cache usages across workflows (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34866](https://redirect.github.com/cilium/cilium/issues/34866),
[@​aanm](https://redirect.github.com/aanm))
- Remove conformance-e2e tests (Backport PR
[#​35157](https://redirect.github.com/cilium/cilium/issues/35157),
Upstream PR
[#​34742](https://redirect.github.com/cilium/cilium/issues/34742),
[@​aanm](https://redirect.github.com/aanm))
**Other Changes:**
- \[v1.16] Add missing test coverage in v1.16 branch
([#​35223](https://redirect.github.com/cilium/cilium/issues/35223),
[@​aanm](https://redirect.github.com/aanm))
- \[v1.16] author backport: fix ENABLE_LOCAL_REDIRECT_POLICY
([#​35129](https://redirect.github.com/cilium/cilium/issues/35129),
[@​ysksuzuki](https://redirect.github.com/ysksuzuki))
- \[v1.16] author backport: LRP fixes
([#​35072](https://redirect.github.com/cilium/cilium/issues/35072),
[@​ysksuzuki](https://redirect.github.com/ysksuzuki))
- \[v1.16] ginkgo: disable test for deprecated annotations-based L7
visibility
([#​35160](https://redirect.github.com/cilium/cilium/issues/35160),
[@​tklauser](https://redirect.github.com/tklauser))
- \[v1.16] test/k8s: replace L7 visibility Pod annotations by L7
visibility policy
([#​35151](https://redirect.github.com/cilium/cilium/issues/35151),
[@​tklauser](https://redirect.github.com/tklauser))
- install: Update image digests for v1.16.2
([#​35052](https://redirect.github.com/cilium/cilium/issues/35052),
[@​cilium-release-bot](https://redirect.github.com/cilium-release-bot)\[bot])
#### Docker Manifests
##### cilium
`quay.io/cilium/cilium:v1.16.3@​sha256:62d2a09bbef840a46099ac4c69421c90f84f28d018d479749049011329aa7f28`
`quay.io/cilium/cilium:stable@sha256:62d2a09bbef840a46099ac4c69421c90f84f28d018d479749049011329aa7f28`
##### clustermesh-apiserver
`quay.io/cilium/clustermesh-apiserver:v1.16.3@​sha256:598cb4fd30b47bf2bc229cd6a011e451cf14753e56a80bb9ef01a09a519f52fb`
`quay.io/cilium/clustermesh-apiserver:stable@sha256:598cb4fd30b47bf2bc229cd6a011e451cf14753e56a80bb9ef01a09a519f52fb`
##### docker-plugin
`quay.io/cilium/docker-plugin:v1.16.3@​sha256:87af6722fdf73cd98123635108f1507d2c982aad82b89906a2925dc4e251acae`
`quay.io/cilium/docker-plugin:stable@sha256:87af6722fdf73cd98123635108f1507d2c982aad82b89906a2925dc4e251acae`
##### hubble-relay
`quay.io/cilium/hubble-relay:v1.16.3@​sha256:feb60efd767e0e7863a94689f4a8db56a0acc7c1d2b307dee66422e3dc25a089`
`quay.io/cilium/hubble-relay:stable@sha256:feb60efd767e0e7863a94689f4a8db56a0acc7c1d2b307dee66422e3dc25a089`
##### operator-alibabacloud
`quay.io/cilium/operator-alibabacloud:v1.16.3@​sha256:d80a785c0e807fc708264a3fcb19be404114f619fd756dd5214f4cad5a281898`
`quay.io/cilium/operator-alibabacloud:stable@sha256:d80a785c0e807fc708264a3fcb19be404114f619fd756dd5214f4cad5a281898`
##### operator-aws
`quay.io/cilium/operator-aws:v1.16.3@​sha256:47f5abc5fa528472d3509c3199d7aab1e120833fb68df455e3b4476916385916`
`quay.io/cilium/operator-aws:stable@sha256:47f5abc5fa528472d3509c3199d7aab1e120833fb68df455e3b4476916385916`
##### operator-azure
`quay.io/cilium/operator-azure:v1.16.3@​sha256:2882aaf03c32525a99181b7c065b2bb19c03eba6626fc736aebe368d90791542`
`quay.io/cilium/operator-azure:stable@sha256:2882aaf03c32525a99181b7c065b2bb19c03eba6626fc736aebe368d90791542`
##### operator-generic
`quay.io/cilium/operator-generic:v1.16.3@​sha256:6e2925ef47a1c76e183c48f95d4ce0d34a1e5e848252f910476c3e11ce1ec94b`
`quay.io/cilium/operator-generic:stable@sha256:6e2925ef47a1c76e183c48f95d4ce0d34a1e5e848252f910476c3e11ce1ec94b`
##### operator
`quay.io/cilium/operator:v1.16.3@​sha256:11219d0027c7ab5fb5ac531d4456b570b51f0d871c52c69e5e70c164bb38af0f`
`quay.io/cilium/operator:stable@sha256:11219d0027c7ab5fb5ac531d4456b570b51f0d871c52c69e5e70c164bb38af0f`
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Renovate
Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOC4xMjcuMCIsInVwZGF0ZWRJblZlciI6IjM4LjEyNy4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsInJlbm92YXRlL2NvbnRhaW5lciIsInR5cGUvcGF0Y2giXX0=-->
TrueCharts Bot
92ed4765f0